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> " 

storage means for storing the separated storage ECM and 

scrambled content; 

ECM interpretation means for extracting a scrambling key list 

from the storage ECM; 
5 scrambling key list interpretation means for extracting a 

scrambling key from the scrambling key list; 

descrambling means for descrambling the scrambled content 
using the extracted scrambling key; and 

reproduction means for reproducing the descrambled content. 

10 [CLAIM 2] 

The conditional access system of Claim 1, 

the broadcast apparatus further comprising: 

TS packetizing means for converting content into TS packets; 

and 

!5 TS packet counting means for acquiring one TS packet at a 

time, and counting an ordinal position of the acquired TS packet from 
a beginning of TS packets, 

wherein the scrambling key list interpretation means extracts 
a scrambling key from the scrambling key list based on the counted 
20 ordinal position of the TS packet, 

the reception apparatus further comprising 
TS packet extraction means for acquiring one TS packet at 
a time from the scrambled content stored on the storage means, and 
counting an ordinal position of the acquired TS packet from a beginning 
25 of TS packets as a TS packet index, 

wherein the scrambling key list interpretation means extracts 
a scrambling key from the scrambling key list based on the TS packet 
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a time from the scrambled content stored on the storage means and 
acquiring specific unscrambled information of the TS packet, 

wherein the scrambling key list interpretation means extracts 
the scrambling key from the scrambling key list based on the specific 
5 unscrambled information. 
[CLAIM 7] 

The conditional access system of Claim 6, 
the broadcast apparatus further comprising 
scrambling key identifier calculation means for performing 
10 an operation on the specific unscrambled information, 

wherein the scrambling key list interpretation means extracts 
a scrambling key from the scrambling key list based on the specific 
unscrambled information on which the operation has been performed, 
and 

15 the reception apparatus further comprising 

scrambling key identifier calculation means for performing 
an operation on the specific unscrambled information, 

wherein the scrambling key list interpretation means extracts 
a scrambling key from the scrambling key list based on the specific 
20 unscrambled information on which the operation has been performed. 
[CLAIM 8] 

A reception apparatus comprising: 

separation means for separating a storage ECM and scrambled 
content from a received pay broadcast program; 
25 storage means for storing the separated storage ECM and 

scrambled content; 

ECM interpretation means for extracting a scrambling key list 
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> 

a scrambling key acquisition step for acquiring a scrambling 

key; ' 

a scrambling key list generation step for generating a 
scrambling key list based on the scrambling key; 
5 an ECM generation step for generating a storage ECM including 

the scrambling key list; 

an ECM transmitting step for transmitting the storage ECM 
periodically; 

a scrambling key list interpretation step for extracting, a 
10 scrambling key from the scrambling key list; 

a scrambling process step for scrambling content using the 
extracted scrambling key; and 

a multiplexing step for multiplexing the storage ECM 
transmitted from the ECM transmitting means with the scrambled content 
15 to distribute a pay broadcast program, 

the reception apparatus comprising: 

a separation step for separating a storage ECM and scrambled 
content from a received pay broadcast program; 

a storage step for storing the separated storage ECM and 
20 scrambled content; 

an ECM interpretation step for extracting a scrambling key 
list from the storage ECM; 

a scrambling key list interpretation step for extracting a 
scrambling key from the scrambling key list; 
25 a descrambling process step for descrambling the scrambled 

content using the extracted scrambling key; and 

a reproduction step for reproducing the descrambled content. 
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list, holding unit 111, a scrambling unit 112, and a scrambling key 

list interpretation unit 113 . 

[0009] 

To clarify a difference from a conventional BS digital 
5 broadcasting system, a system for generating an ECM and transmitting 
it in the conventional BS digital broadcasting system, which is 
different from a system for transmitting a storage ECM and generating 
it, is also shown in FIG. 1 and FIG . 2. Portions where a scrambling 
key acquired in the scrambling key acquisition unit 108 is passed 
10 to the scrambling process unit 103 and the ECM generation unit 104 
correspond to the conventional BS digital broadcasting system (shown 
by dotted lines in the figures). 
[0010] 

FIG. 3 shows a construction of the descrambling process unit 
15 204 of the receiver 200 in detail. The descrambling process unit 204 
includes a TS packet extraction unit 210, a descrambling unit 211, 
and a scrambling key list interpretation unit 212. 
[0011] 

The following describes detailed operations of the broadcast 
20 apparatus and the receiver for describing correspondence information 
between TS packets and scrambling keys (information to extract a 
scrambling key corresponding to a TS packet from a scrambling key 
list) in an ECM (Entitlement Control Message) . 
[0012] 

25 (Broadcast Apparatus) 

FIG. 4 is a flowchart showing an operation procedure when 
scrambling content such as an image,- a sound, and data in the broadcast 
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(Step S505) .. -The scrambling process unit -103 scrambles the content 
converted into the" TS packets (Step S506) . The multiplexing unit 10 6 
multiplexes the scrambled content with the storage ECM (Step S507) 
to generate a pay broadcast program. The pay broadcast program is 
5 broadcasted as a TS . In this specification, a pay broadcast program 
is defined as being generated by multiplexing scrambled content with 
a storage ECM. 
[0013] 

In the example of FIG. 1, a scrambling key and content are 
10 generated in an apparatus other than the broadcast apparatus 100. 
Instead, one ox both of the scrambling key and the content may be 
generated in the broadcast apparatus 100. 
[0014] 

FIG. 5 is a detailed flowchart showing a process of the 
15 scrambling process unit 103 (Step S506 in FIG. 4). The scrambling 
process unit 103 acquires a scrambling key list from the scrambling 
key list generation unit 10 2, and stores it to the scrambling key 
list holding unit 111 (Step S601). The TS packet counting unit 110 
acquires the content converted into TS packets by the TS packetizing 
20 unit 101 in Step S504, one TS packet at a time (StepS602) . When acquiring 
the one TS packet, the TS packet counting unit 110 counts an ordinal 
position of the.TS packet from a beginning of TS packets by accumulating 
the number of TS packets, passes a TS packet cumulative number 
(information of an ordinal position of a TS packet from a beginning 
25 of TS packets) to the scrambling key list interpretation unit 113, 
and passes the TS packet to the scrambling unit 112 (Step S603) . The 
TS packet cumulative number is reset to zero before the process shown 
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is 101 since the TSP101 is a 101 st TS packet. In accordance with the 
scrambling key list in FIG. 1, a scrambling key corresponding -to the 
TSP101 is not the Ksl but a next Ks2. 
[0017] 

5 (Timing for Transmitting Scrambling Key List) 

The following describes a timing for transmitting the 
scrambling key list. Since at least one scrambling key list may be 
stored for each piece of scrambled content, the scrambling key list 
may be transmitted in a time period longer than a transmission, period 

10 for the conventional BS digital broadcasting systems (for example, 
approximately ten times longer) as shown in FIG . 19 . In an environment 
where the scrambling key list is assured to be securely stored, one 
scrambling key list may be transmitted for the scrambled content- only 
once . 

15 [0018] 

(Receiver) 

FIG. 6 is a flowchart showing an operation procedure in 
distinguishing between the storage ECM and the conventional ECMs based 
on the table identifier or the extended table identifier to separate 

20 the storage ECM and the scrambled content in the TS separation unit 
201, storing the storage ECM in the HDD 202, and then descrambling 
the scrambled content in the receiver 200. The operation procedure 
is described with reference to FIG. 1 and FIG. 3. The storage ECM 
and the scrambled content may be stored as one TS temporarily, and 

25 then separated. 
[0019] 

The storage ECM stored on the HDD 202 is transmitted to the 
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(Detailed Operation of Receiver in Reproducing Scrambled Content in 
Special reproduction Mode) 

The following describes a detailed operation of the receiver 
in reproducing the scrambled content after storage in a special 
5 reproduction mode. Here, a fast-forward reproduction mode, which is 
a typical special reproduction mode, is described. As shown in FIG. 
21, in accordance with MPEG- 2 coding system, an image stream includes 
three kinds of pictures: an I picture (an intraframe- coded picture) , 
a B picture (a bidirectional frame), and a P picture (a predictive 

10 picture) . Since only the I picture can be decoded solely, the 
fast- forward reproduction mode can be realized by reproducing only 
the I picture. FIG. 12 is a pattern diagram showing the image stream 
shown in FIG . 21 converted into a TS . In FIG . 12 , it is simply presumed 
that I pictures in FIG . 21 are converted into the TS packets, being 

15 shaded portions in FIG . 12. That is, it is presumed that a first, 
second, third, and forth pictures are converted into packets from 
a TSP2 to a TSP5 , packets from a TSP101 to a TSP104, packets from 
a TSP201 to a TSP204 , and packets from a TSP301 to a TSP3 04 , respectively . 
[0022] 

20 The following describes an operation procedure of the receiver 

in descrambling the TS packets, being the diagonally shaded portions. 
The scrambling Key list is shown in FIG. 11. Although a flow of the 
operation procedure is the same as that in FIG. 6, the process of the 
descrambling process unit is partly altered. Therefore, FIG. 22 shows 

25 the process of the descrambling process unit . The operation procedure 
is described with reference to FIG. 7 . The TS packet extraction unit 
210 extracts scrambled content for one TS packet (Step S1101), and 
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by reversing an extraction order of TS packets in a fast-forward 
reproduction function. Also, a random access function is realized 
by altering a starting position of the TS packet, to be extracted. 

Various special reproduction modes is realized by extracting 
5 a scrambling key corresponding to any one of TS packets, a target 
to be descrambled, from the scrambling key list. 
[0025] 

(SECOND EMBODIMENT) 

In the example of the first embodiment, security is assured 

10 within the receiver. The description is done with the construction 
that the scrambling key list holding unit 203 and the scrambling key 
list interpretation unit 212 are within the receiver. However, -as 
shown in a construction of FIG. 13, if the scrambling key list holding 
unit 203 and the scrambling key list interpretation unit 212 are set 

15 within the security module 300, security of the scrambling key list 
can be improved. FIG . 14 shows the descrambling process unit in detail . 
[0026] 

Although a flow of an operation procedure in FIG. 14 is the 
same as those in FIG. 6 and FIG. 7 (the process of the descrambling 

20 process unit in FIG. 6 (Step S705) is altered to a process -of the 
descrambling process unit and the security module in FIG. 14), Step 
S803 in FIG . 7 is altered to a process of the security module in FIG. 
14 . In Step S803, the scrambling key may be encoded when passing the 
scrambling key from the security module 300 to the descrambling unit. 

25 The encoded scrambling key may be deleted from a memory within the 
receiver immediately after the process in the receiver 
[0027] 
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[0031] 

The de-scrambling process unit 204 includes a TS packet 
extraction unit 220, a scrambling key identifier calculation unit 
221, a descrambling unit 222, and a scrambling key list interpretation 
5 unit 223. 
[0032] 

(Broadcast Apparatus) 

A flowchart showing an operation procedure in scrambling 
content including an image, a sound, and data in the broadcast apparatus 
10 100 is the same as the flowchart in FIG. 4 . However, since the process 
' in the scrambling process unit 103 (Step S505) is different from that 
in FIG. 4, FIG . 17 shows a flowchart of the operation procedure, The 
operation procedure is described with reference to FIG. 1 and FIG. 
15 . 
15 [0033] 

The scrambling process unit 103 acquires a scrambling key 
from the scrambling key list generation unit 102, and stores it to 
the scrambling key list holding unit 122 (Step S901) . The TS packet 
header interpretation unit 121 acquires content converted to TS packets 

20 by the TS packetizing unit 101 (Step S504) for one TS packet (Step 
S902). The TS packet header interpretation unit 121 reads a value 
of CC when acquiring the one TS packet, passes the read value to the 
scrambling key identifier calculation unit 120, and passes the TS 
packet to the scrambling unit 123 (Step S903). 

25 The scrambling key identifier calculation unit 120 calculates 

a scrambling key identifier based on the value of the CC, and passes 
it to the scrambling key list interpretation unit 124 (Step S904). 
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key list again. For example , by changing the value of n to 4 without 
changing the scrambling key list as shown in PIG. 20, the value of 
the identifier can be any number between 0 and 3 . As a result, scrambling 
keys to be used are Ksl, Ks2, Ks3, and Ks4. Note that the value of 
5 n may be a fixed value in advance as a calculation method, or the 
value may be described in the variable portion in the storage ECM 
shown in FIG . 8 . 
[0035] 

Instead of using the value of CC, specific bits of PCR (Program 
10 Clock Reference) or OPCR (Original PCR) , which are prescribed by the 
MPEG - 2 coding system as an international standard as well as CC, may 
be used for calculating the scrambling key identifier. For example, 
by using the four-bit values in the PCR or OPCR, a scrambling key 
identifier may be calculated in a same manner as in the above process 
15 using the value of CC. 
[0036] 

Otherwise , instead of using an area whose usage has been already 
prescribed by the MPEG- 2 coding system, the value of a scrambling 
key identifier may be described directly in an area where a user can 
20 utilize freely, such as a private data area in Adaptation Field. 
[0037] 
( Receiver) 

A flowchart of an operation procedure that the TS separation 
unit 2 01 separates the storage ECM and the scrambled content, and 
25 stores them in the HDD202, and then the receiver 200 descrambles the 
scrambled content is the same as that in FIG. 6. However, since the 
process of the descrambling unit 204 (Step S705) is different from 
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[ EFFECTS OF THE INVENTION] 

In the present invention-, by transmitting a scrambling key 
list, when -reproducing scrambled con-tent after storage, a .scrambling 
key corresponding to any one of TS packets , being a reproduction target , 
5 can be extracted immediately from the scrambling key list. 
[0041] 

Since a transmission period of the scrambling key list may 
be longer, transmission capacity and a control process of transmission 
timing by the broadcast apparatus can be decreased easily. 
10 [0042] 

Usage of plural scrambling keys for one piece of content can 
assure a conventional security intensity. 
[0043] 

Storage of the scrambling key list within a security module 
15 can protect the scrambling key list from detection by a malicious 
user . ■ - 

[0044] 

As described above, a sufficient performance level of a special 
reproduction function after storage of scrambled content can be 
20 realized in a method where a security intensity is assured. 
[BRIEF DESCRIPTION OF THE DRAWINGS] 

■ FIG . 1 shows an overall construction of a system. 
FIG. 2 shows a construction of a scrambling process unit in 
a first embodiment of the present invention. 
25 FIG. 3 shows a construction of a descrambling unit in the 

first embodiment of the present invention. 

FIG . 4 is a flowchart showing an operation procedure of a 
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scrambling process unit in the third embodiment of the present 
invention. 

FIG. 18 is a flowchart showing an operation procedure of the 
descrambling process unit in the third embodiment of the present 
5 invention . 

FIG . 19 shows timing for transmitting the scrambling key list . 
FIG. 20 is a second figure showing a specific example of the 

scrambling key list. 

FIG. 21 is a schematic view showing an image stream in MPEG-2 

10 coding system. 

FIG. 2 2 is a flowchart showing an operation procedure of the 
descrambling process unit in reproducing content in a fast-forward 
reproduction mode in the first embodiment of the present invention. 
[NUMERICAL REFERENCES] 
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100. . . . broadcast apparatus 

101. . . . TS papcketizing unit 

102 .... scrambling key list generation unit 

103. . . - scrambling process unit 

104. . . . ECM generation unit 

105. . . . ECM transmitting unit 

106. . . . multiplexing unit 

107. . . . content acquisition unit 

108. . . . scrambling key acquisition unit 

110, . TS packet counting unit 

111, 122, 203. . , . scrambling key list holding unit 

112, 123. . . . scrambling unit 

113, 124, 212, 223. . . . scrambling key list interpretation 
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[DOCUMENT] Abstract 
[SUMMARY] 

[AIM] To realize a special reproduction function after storage 
of scrambled content., at a level so as to satisfy users. 

5 [MEANS TO ACHIEVE THE AIM] 

An broadcast apparatus comprising: scrambling key list 
generation means for generating a scrambling key, ECM generation means 
for generating a storage ECM based on the scrambling key list, ECM 
transmitting means for transmitting the storage ECM, and scrambling 

10 means for scrambling content each TS packet, and a receiver comprising : 
ECM interpretation means for extracting a scrambling key list from 
the received storage ECM, scrambling key list interpretation means 
for extracting a scrambling key of a corresponding TS packet, and 
descrambling means for descrambling content each TS packet. 

15 

[SELECTED DRAWING] FIG. 1 
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FIG. 2 



co . • 

2\ 



CO \ 

2 \ 



UJ 
CO 



CO 



el 



UJ 
CO 



CO 
00 
UJ . 

o* 

O ' 

CL 

O 

CD 

< 

ET 
O 
CO 



CO 




O 



cB-H 
-J 

CO 









o 


UJ 






1 


err 


z. 


•z: 


Ij 




CD 


ciJ 




h- 


s 


cn 







s 

-J 
O 
c*i 

■z 

o 

4 

i 
i 



FIG. 4 



c 



START 



S501 



ACQUIRE A SCRAMBLING KEY 

IN SCRAMBLING KEY ACQUISITION UNIT, AND 

PASS IT TO SCRAMBLING KEY LIST GENERATION UNCTf 



S502 



IN SCRAMBLING KEY LIST GENERATION UNIT, 
GENERATE A SCRAMBLING KEY LIST 



S503 



2 



IN ECM GENERATION UNIT, GENERATE A STORAGE EC 
BASED ON THE SCRAMBUN KEY LIST j 



S504 



IN ECM TRANSMISSION UNIT, 
TRANSMIT THE STORAGE ECM TO MULTIPLEXING UNIT 



S505 



IN TS PACKETEING UNIT, CONVERT CONTENT | 
ACQUIRED IN CONTENT ACQUISITION UNn" INTO TS PACKETS 

L 

S506 



PROCESS BY SCRAMBLING PROCESS UNIT 



S507 



IN MULTIPLEXING UNIT, 
SCRAMBLED CONTENT \ 


MULTIPLEX 

WITH THE STORAGE ECM 




r 



c 



END 



) 



• FIG. 6 



c 



START 



i : n 

PASS THE STORAGE ECM STORED IN HDD TO ECM 
INTERPRETATION UNIT WITHIN SECURITY MODULE 



S701 



.S702 



IN ECM INTERPRETATION UNIT, EXTRACT THE 
SCRAMUNG KEY UST FROM THE STORAGE ECM 



S703 



STORE THE SCRAMBLING KEY ACQUIRED FROM ECM 
INTERPRETATION UNIT IN SCRAMBLING KEY LIST 

. HOLDING UNIT 



-S704. 



PASS THE SCRAMBLED CONETNT STORED , 
■.IN HDD TO DESCRAMBUNG PROCESS UNIT 



a* 



S705 



PROCESS BY DESCRAMBUNG PROCESS UNIT 



c 



END 



FIG. 8 



STORAGE ECM 



SECTION HEADER 


8 BYTES ^ 


ECM MAIN BODY 


FIXED PORTION 
(SCRAMBLING KEY ETC.) 


E 

26 BYTES 


VARIABLE PORTION 
(VARIOUS FUNCTIONAL INF( 


DRMATION) 


TAMPERING DETECTION 


4 BYTES 


SECTION CRC 


4 BYTES 



TABLE IDENTIFER 



EXTENDED TABLE IDENTIFIER 



1 BYTE 



2. BYTES 



ADDED 



SCRAMBLING 

KEY LIST 
DESCRIPTOR 



FIG. 9 



DATA STRUCTURE OF SCRAMBLING KEY LIST DESCRIPTOR 



CA_Ks_L i st_descr i pto r 0 I 




descriptor_tag 


1 BYTE 


descr iptorj ength 


1 BYTE 


for(i=0;i<N; i4+) ( 


1 BYTE 


Ks_id 


TS_packe t _numbe r 


2 BYTES 


ICs 

t 

I 


8 BYTES 



Ks.id 

TS_packet_number 
Ks 



SCRAMBLING KEY IDENTIFIER (TO IDENTIFY SCRAMBLING KEYS) 
THE NUMBER OF TS PACKETS SCRAMBLED WITH THE Ks 
SCRAMBLING KEY 



RG. 11 

• ► 



SCRAMBLING KEY LIST 



Ks_id 


1 


TS_packet_numbe r 


1 0 0 


Ks 


K s .1 


Ks_id 


2 


TS_packet _numbe r 


1 0 0 


Ks 


K s 2 


Ks_id 


3 


TS _packet_numbe r 


1 0 0 


Ks 


K s 3 


Ks_id 


4 


TS_packet_number 


10 0 


Ks 


K s 4 



. FIG. 13 



O 



1 
o 



O 

o 



> 



CM 



si 



GO 
CO 



CO .iL. 
I— o 

< 




i 














o 




& 








CO 




U 












O 




co 








IU 










UJ 













O 
CO 



o 
o 



i- £ 

ID 



Ui 



o 

o 



UJ 



^> 
O 
UJ 5 
co 2. 



CM 



m 
o 

















z 




o 






^ 












<: 












CO 


5 



15 

C*L co 
&3 



o 
co 

V 



Ui 



FIG. 15 



CO. 

°\ 



• 2.- 



t3 



CD" 




















o 













UJ 
C/3 



Z) 

CO 
GO 
LU 

a 
o 
cc 

CL 

a 
□ 

CD 
< 

cr 
o 

CO 



CO 

csl 



-J -u- 



I 




£ 


© 


V- 


TAT 








Cki 


o 










Ui 


CO 

\ — 


V— 



o 

(M 



\ 



UJ 
O 

CO 



00 



in 



O 

o 



















>- 


§ 


^~ 








<: 


UJ 




u_ 


O 


V— 








vU 







O 
CO 



•J. 



CO 



UJ 

JZ_' 



•2. 



CM 



\ 



f -5 

it 

en or 



o 



<: 

O 

CO 



o 




t 

< 

o 
V— 

UJ. 

:> 

s 



CO 

-J 

o 



o 

o 

I 



FIG. 17 



NO 



c 



START 



D 



S901 



: ACQU1RE A SCRAMBLING KEY LIST FROM SCRAMBLING" 
KEY GENERATION UNIT, AND STORE IT IN SCRAMBLING' 
KEY LIST HOLDING UNIT 



S902 



TS PACKET HEADER INTERPRETATION UNIT ACQUIRES 
CONTENT ACQUIRED IN TS PACKETIZING UNrT" 

FOR ONE TS PACKET 



S903 



r " - ~ 

IN TS PACKET HEADER INTERPRETATION UNIT. READ VALUE OF.CC, 
PASS n TO SCRAMBLING KEY IDENTIFIER CALCULATION UNIT. | 
AND PASS THE ONE ACQUIRED TS PACKET TO SCRAMBLING UNIT 
L — 1 

•S904 



IN SCRAMBLING KEY IDENTIFIER CALCULATION UNIT, CALCULATE 
A SCRAMBLING KEY IDENTIFIER BASED ON THE VALUE OF CC, [ 
ID PASS IT TO SCRAMBLING KEY LIST INTERPRETATION UNIT. 



AN 



S905 



IN SCRAMBLING KEY LIST INTERPRETATION UNrT, EXTRACT THE| 
SCRAMBLING KEY IDENTIFIER AND A CORRESPONDING SCRAMBLING 
KEY FROM SCRAMBLING KEY UST STORED IN SCRAMBLING KEY 
U ^T HOLDING UNIT. AND PASS THEM TO SCRAMBLING UNIT 



S906 



IN SCRAMBLING UNrT. SCRAMBLE THE ONE < 
ACQUIRED TS PACKET WITH THE ACQUIRED 
SCRAMBLING KEY. AND PASS FT TOMULTIPLEXING UNfl 



S907 



ACQUIRE ALL TS PACKETS ? 



YES 



FIG. 19 



O 

m 
O. 
oo 



o 

CM 

2r> 



CO 



z: 
tu 

2: 
O 
O 



CNJ 

&5 



CO 



— < 



> 



a 

< 
cr 
o 
00 



CO 
W 



O 

DQ 
< 

cr 

o 
00 



CM 

r 

a 
2: 
□ 

CD 
< 

cr 
o 
00 



UJ 







2: 




n 




m 






us 




>- 


0 


UJ 


00 





X 

CD 



O 

o 
-J 

Q 
O 
cr 

UJ 
0- 



00 
00 



CO 

< 
a: 




FIG. 21 




CL 




CD 



CD 



CD 



CD 




LU 

q: 
o 

CL 



o o 

CD Q. 



